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Abstract 

In dynamic wireless ad-hoc networks (DynWANs), autonomous computing devices set up a network 
for the communication needs of the moment. These networks require the implementation of a medium 
access control (MAC) layer. We consider MAC protocols for DynWANs that need to be autonomous and 
robust as well as have high bandwidth utilization, high predictability degree of bandwidth allocation, and 
low communication delay in the presence of frequent topological changes to the communication network. 
Recent studies have shown that existing implementations cannot guarantee the necessary satisfaction of 
these timing requirements. We propose a self-stabilizing MAC algorithm for DynWANs that guarantees 
a short convergence period, and by that, it can facilitate the satisfaction of severe timing requirements, 
such as the above. Besides the contribution in the algorithmic front of research, we expect that our 
proposal can enable quicker adoption by practitioners and faster deployment of DynWANs, such as the 
IEEE 802 . lip for mobile ad hoc networks (MANETs) and vehicular ad-hoc network (VANETs). 
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1 Introduction 



Dynamic wireless ad-hoc networks (DynWANs) are autonomous and self-organizing systems where com- 
puting devices require networking applications when a fixed network infrastructure is not available or not 
preferred to be used. In these cases, computing devices may set up a short-lived network for the commu- 
nication needs of the moment, also known as, an ad-hoc network. Ad-hoc networks are based on wireless 
communications that require implementation of a Medium Access Control (MAC) layer. We consider MAC 
protocols for DynWANs that need to be autonomous, robust, and have high bandwidth utilization, a high 
predictability degree of bandwidth allocation, and low communication delay [22] in the presence of frequent 
changes to the communication network topology. Existing implementations cannot guarantee the necessary 
satisfaction of timing requirements J6j 13 . This work proposes an algorithmic design for self-stabilizing 
MAC protocols that guarantees a short convergence period, and by that, can facilitate the satisfaction of 
severe timing requirements. The proposed algorithm possesses a greater degree of predictability, while 
maintaining low communication delays and high throughput. 

The dynamic and difficult-to-predict nature of wireless ad-hoc networks gives rise to many fault- 
tolerance issues and requires efficient solutions. DynWANs, for example, are subject to transient faults 
due to hardware/software temporal malfunctions or short-lived violations of the assumed settings for mod- 
eling the location of the mobile nodes. Fault tolerant systems that are self-stabilizing [16] can recover after 
the occurrence of transient faults, which can cause an arbitrary corruption of the system state (so long as the 
program's code is still intact), or the model of dynamic networks in which communication links and nodes 
may fail and recover during normal operation iflTl . The proof of self-stabilization requires convergence from 
an arbitrary starting system state. Moreover, once the system has converged and followed its specifications, 
it is required to do so forever. The self-stabilization design criteria liberate the application designer from 
dealing with low-level complications, such as bandwidth allocation in the presence of topology changes, 
and provide an important level of abstraction. Consequently, the application design can easily focus on its 
task - and knowledge-driven aspects. 

The IEEE 802.11 standard is widely used for wireless communications. Nonetheless, the research field 
of MAC protocols is very active and requires further investigation. In fact, the IEEE 802 . 11 amendment, 
IEEE 802 . lip, for wireless access in vehicular environments (WAVE), has just being published. It was 
shown that the standard's existing implementations cannot guarantee channel access before a finite dead- 
line [6j|71. Therefore, applications with severe timing requirements cannot predictably meet their deadlines, 
e.g., safety-critical applications for vehicular systems. 

ALOHAnet and its synchronized version Slotted ALOHA [ 1 ] are pioneering wireless systems that em- 
ploy a strategy of "random access". Time division multiple access (TDMA) BP is another early approach, 
where nodes transmit one after the other, each using its own timeslot, say, according to a defined schedule. 
Radio transmission analysis in ad-hoc networks ll20li and relocation analysis of mobile nodes [34] show that 
there are scenarios in which MAC algorithms that employ a scheduled access strategy have lower throughput 
than algorithms that follow the random access strategy. However, the scheduled approach offers greater pre- 
dictability of bandwidth allocation and communication delay, which can facilitate fairness ll23l and energy 
conservation [50]. 

Our design choices have basic radio technology in mind, whilst aiming at satisfying applications that 
have severe timing requirements. We consider TDMA frames with fixed number of fixed length timeslots. 
The design choice of TDMA frames with fixed-length radio time fits well applications that have severe 
delay requirements. By avoiding the division of fixed length frames into timeslots of non-equal length, as 
in ll23l[T0ll . we take into consideration the specifications of basic radio technology. 
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In the context of the above design choices, there are two well-known approaches for dealing with con- 
tention (timeslot exhaustion): (1) employing policies for administering message priority (for meeting timing 
requirements while maintaining high bandwidth utilization, such as 11391 ), or (2) adjusting the nodes' indi- 
vidual transmission signal strength or carrier sense threshold ll43l . The former approach is widely accepted 
and adopted by the IEEE 802 . lip standard, whereas the latter has only been evaluated via computer simu- 
lations 1351 . 

The proposed algorithm facilitates the implementation of both of the above approaches (more details 
appear in Section[7j). For the sake of presentation simplicity, we consider a single priority MAC protocol and 
base the timeslot allocation on straightforward vertex-coloring. The proposed algorithm allocates timeslots 
to a number of nearby transmitters, i.e., a number that is bounded by the TDMA frame size, whereas other 
nearby transmitters receive busy channel indications. The analysis considers saturated situations in which 
the node degree in the message collision graph is smaller than the TDMA frame size. As explained above, 
this analysis assumption does not restrict the number of concurrent transmitters when implementing the 
proposed MAC algorithm. 

Related work We are not the first to propose a MAC algorithm for DynWANs that follows the TDMAs 
scheduled approach. STDMA [51] and Viqar and Welch ll48l consider GNSS-based scheduling (Global 
Navigation Satellite System [44]) according to the nodes' geographical position and their trajectories. Au- 
tonomous systems cannot depend on GNSS services, because they are not always available, or preferred not 
to be used, due to their cost. Arbitrarily long failure of signal loss can occur in underground parking lots 
and road tunnels. We propose a self-stabilizing TDMA algorithm that does not require GNSS accessibil- 
ity or knowledge about the node trajectories. Rather it considers an underlying self-stabilizing local pulse 
synchronization, such as Ifl4ll38l . which can be used for TDMA alignment, details appear in [38]. 

When using collision-detection at the receiving- side 1351 [TTIIBTI 14711311 . it is up to the receiving-side 
to notify the sender about collisions via another round of collision-prone transmissions, and by using FI 
(frame information) payload fields that includes T entries, where T is the TDMA frame size. Thus far, FI- 
based protocols study the stochastic resolution of message collision via computer network simulations llBTl 
ID 051 HHHtJ (3D . Simulations are also used for evaluating the heuristics of MS -ALOHA [@51 for dealing 
with contention (timeslot exhaustion) by adjusting the nodes' individual transmission signal strength and 
/ or carrier sense threshold. We do not consider lengthy frame information (FI) fields, which significantly 
increase the control information overhead, and yet we provide provable guarantee regarding the convergence 
time. Further analysis validation of the proposed algorithm via simulations and test bed implementation can 
be found in Section [8] and respectively, in 081 . 

The proposed algorithm does not consider collision-detection mechanisms that are based on signal pro- 
cessing or hardware support, as in lfT31 . Rather, it employs a variation on a well-known strategy for eventu- 
ally avoiding concurrent transmissions among neighbors. This strategy allows the sending-side to eventually 
observe the existence of interfering transmissions. Before sending, the sender waits for a random duration 
while performing a clear channel assessment. A channel is considered to be used once the detected energy 
levels reach a threshold in which the radio unit is expected to succeed in carrier sense locking (details appear 
in Section [3]). 

The proposed MAC algorithm can be entirely based on the carrier sensing of message transmission, 
as in ifTOl , which focuses on fair bandwidth allocation, but does not consider dynamic networks or self- 
stabilization. Our algorithm uses carrier sensing of message transmission and the above collision avoidance 
strategy for coloring vertices, i.e., single-hop-distance broadcasting. It can facilitate unicast functionally 
with no significant overheads. Two-hop-distance vertex coloring is often used by unicast MAC protocols for 
mitigating hidden terminal phenomena. Naturally, the proposed algorithm facilitates the implementation of 
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a self-stabilizing two-hop-distance vertex coloring, such as [8]. 

An abstract MAC layer was specified for DynWANs in |[28l . The authors mention algorithms that can 
satisfy their specifications. However, they do not consider predictable broadcasting schedules. 

Local algorithms ll2Tl[T9l considers both theoretical and practical aspects of MAC algorithms [?, ]and 
references therein] Wattenhofer2010Theory and the related problem of clock synchronization, see (32 ] and 
references therein. For example, the first partly-asynchronous self-organizing local algorithm for vertex- 
coloring in wireless ad-hoc networks is presented in [42]. However, this line currently does not consider 
dynamic networks and predictable bandwidth allocation. 

Two examples of self- stabilizing TDMA algorithms are presented in |[23ll27l . The algorithms are based 
on vertex-coloring and consider (non-dynamic) ad-hoc networks. Recomputation and floating output tech- 
niques (HI), Section 2.8) are used for converting deterministic local algorithms to self- stabilization in [33]. 
The authors focus on problems that are related to MAC algorithms. However, deterministic MAC algorithms 
are known to be inefficient in their bandwidth allocation when the topology of the communication network 
can change frequently [34]. There are several other proposals related to self-stabilizing MAC algorithms 
for sensor networks, e.g., ll29l 151 l4l l30l : however, none of them consider dynamic networks and their frame 
control information is quite extensive. 

The MAC algorithms in ||34l [36l [35l l38ll have no proof that they are self-stabilizing. The authors of 11341 
present a MAC algorithm that uses convergence from a random starting state (inspired by self-stabilization). 
In ||3"6l 135113811 , the authors use computer network simulators for evaluating self-* MAC algorithms. 
Our contribution This work proposes a self-stabilizing MAC algorithm that demonstrates rapid con- 
vergence without the extensive use of frame control information. Our analysis shows that the algorithm 
facilitates the satisfaction of severe timing requirements for DynWANs. 

We start by considering transient faults and topological changes to the communication network, i.e., 
demonstrating self- stabilization in Theorem 4.2 We then turn to focus on bounding the algorithm's conver- 
gence time after an arbitrary and unbounded finite sequence of transient faults and changes to the network 
topology. Theore m |5.1| shows that the expected local convergence time is brief, and bounds it in equa- 
tion Q. Theorem |6 . 2| formulates the expected global convergence time in equation (21 ). Moreover, for a 
given probability, the global convergence time is calculated in equation (22 ). 

For discussion (Section [8), we point out the algorithm's ability to facilitate the satisfaction of severe 
timing requirements for DynWANs. Moreover, the analysis conclusions explain that when allowing merely 
a small fraction of the bandwidth to be spent on frame control information and when considering any given 
probability to converge within a bounded time, the proposed algorithm demonstrates a low dependency 
degree on the number of nodes in the network (Fig. [4] and Fig.[6]>. 

Due to the space limit, some of the proofs appear in the Appendix. 



2 Preliminaries 

The system consists of a set, P, of N anonymous communicating entities, which we call nodes. Denote 
every node p t G P with a unique index, i. 

Synchronization Each node has fine-grained, real-time clock hardware. We assume that the MAC proto- 
col is invoked periodically by synchronized common pulse that aligns the starting time of the TDMA frame. 
This can be based, for example, on TDMA alignment algorithms IT3811 . GPS 11241 or a distributed pulse syn- 
chronization algorithm [ 14]. The term (broadcasting) timeslot refers to the period between two consecutive 
common pulses, t x and t x+ \, such that t x+ \ = (t x mod T) + 1, where T is a predefined constant named the 



3 



Broadcasting round Size: T = 3 timeslots 
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Figure 1 : An example of TDMA frame, with 3 timeslots and 3 listening/signaling periods of size £ (signal 
exposure time). 

frame size. Throughout the paper, we assume that T > 2. In our pseudo-code, we use the event timeslot(?) 
that is triggered by the common pulse. We assume that the timeslots are aligned. 

Communications and interferences At any instance of time, the ability of any pair of nodes to directly 
communicate is defined by the set, Ni C P, of (direct) neighbors that node /?,• G P can communicate with 
directly. Wireless transmissions are subject to interferences (collisions). We consider the potential of nodes 
to interfere with each other's communications. 

Nodes raise the event carrier_sense() when they detect that the received energy levels have reached a 
threshold in which the radio unit is expected to succeed in carrier sense locking, see |[25l . 

We consider a graph-based interference model, where the set 9(i 5 Ni is the set of nodes that may 
interfere with pfs communications when any nonempty subset of them, / C 9fc : / ^ 0, transmit concurrently 
with pi. We call 9k the (extended) neighborhood of node pi G P and d\ = \9Q is named the (extended) 
degree of node p\. We assume that at any time, for any pair of nodes, pi,pj G P it holds that pj G 9k implies 
that pi G 9[j. Given a particular instance of time, we define the (interference) graph as G = (P,E), where 
E = Ui € p{(pi,pj) : pj G 9k} represents the interference relationships among nodes. 

Communication schemes Timeslots allow the transmission of DATA packets using the transmit() and re- 
ceiveQ primitives after fetching (MACJetch()) a new packet from the upper layer, and respectively, before 
delivering (MAC_deliver()) the packet to the upper layer. A beacon is a short packet that includes no data 
load, rather its carrier sense delivers important information. Before the transmission of the DATA packet in 
timeslot t, the scheme uses beacons for singling the node intention to transmit a DATA packet within t. 

Fig. [T] depicts a TDMA frame with three timeslots. Each timeslot has a constant number, MaxRnd = 4, 
of listening/signaling periods in which beacons can be] sent. Each listening/signaling period take a period 
of £ (signal exposure time); the period during which a beacon that is sent by node p, G P is transmitted and 
received by all neighbors pj G 9k- Namely, the period between pfs transition and the rise of the carrier 
sense event, carrier_sense(), by pj G 9k- 

System Settings We consider the interleaving model iPToTl . Every node, pi G P, executes a program that 
is a sequence of atomic steps. The state stj of a node pj consists of the value of all the variables of the 
node (including messages in transit for p{). Variables are associated with individual node states by using the 
subscript notation, i.e., x, is the variable x in the state of node p\. The term configuration is used for a tuple 
of the form (G,{sti}^ =l ), where G is the (interference) graph, and {sti}f =l are the nodes' states (including 
the set of all incoming communications). An execution (run) R = (c(0),c(l), . . .) is an unbounded sequence 
of system configurations c(x), such that each configuration c(x + 1) (except the initial configuration c(0)) is 
obtained from the preceding configuration c(x) by the execution of steps, {ai(x)} Pi€ p, taken by all nodes. 

Let T (task) be a set of specifications and LE a set of all executions that satisfy task x. We consider 
TDMA-based MAC protocols for which the task T TOMA and the set LE TDMA of legal executions specify that 
every node has its own broadcasting timeslot that is unique within its neighborhood. We say that configu- 
ration c sa f e is safe if there is an execution R G LE, such that c sa f e is R's starting configuration. Let R be an 
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Constants, variables, macros and external functions 

2 MaxRnd (n in the proofs) : integer = bound on round number 18 
s : [0, T-l] U {_L} = next timeslot to broadcast or null, _L 

4 signal : boolean = trying to acquiring the channel 20 
unused[Q,T-l] : boolean = marking unused timeslots 

6 unused-set = { k : unused[k] = true } : unused timeslot set (macm 
MAC_fetch()/MAC_deliver() : MAC layer interface 

8 transmit/receive/carrier_sense : communication primitives 24 

10 Upon timeslot(() 

iff = 0As = _L then s := selectJjnusedfwnwjerfje?) 
12 (unused[t], signal) := (true, false) (* remove stale info. *) 

its^Xt\t = s then send(MAC_fetch()) 

14 

Upon receive(< DATA, m> ) do MAC_deliver(< m> ) 



Function send(m) (* send message m to p'-s neighbors *) 
for ((signal, k) := (true, 0); k := k+ \ ;k< MaxRnd) do 
if signal then with probability p(k) = 1/ (MaxRnd — k) do 
signal := false (* quit the competition *) 
transmit(< BEACON> ) (* try acquiring the channel *) 
i wait until the end of competition round (* exposure period alignment *) 
if s -L then transmit(< DATA, m> ) (* send the data packet *) 

Upon carrier_sense(?) (* defer transmission during t *) 
> if i = 1 A signal then s := _L (* mark that the timeslot is not unique *) 
(signal, unused[t\) := (false, false) (* quit the competition *) 

I 

Function select-unused(se() (* select an empty timeslot *) 
) if set = then return _L else return uniform .select (set) 



Figure 2: Self-stabilizing TDMA-based MAC algorithm, code of node p t . 



execution and c G R its arbitrary starting configuration. We say that R converges with respect to x if within 
a bounded number of steps from c, the system reaches a safe configuration c sa f e . The closure property 
requires that for any execution, R, that starts form c sa f e implies that R € LE. An algorithm is said to be 
self-stabilizing if it satisfies both the convergence and the closure properties. 

We describe execution R as an unbounded number of concatenated finite sequences of configurations. 
The finite sequences, R{x) = (c (x), . . . c T _i (x)), x > 0, is a broadcasting round if (1) configuration c (x) 
has a clock value, t, of and immediately follows a configuration in which the clock value is T — 1, and 
(2) configuration c T _ { (x) has a clock value of T — 1 and immediately precedes a configuration in which the 
clock value is 0. 



3 Algorithm Description 

The MAC algorithm in Fig.|2]assigns timeslots to nodes. Suppose that the ratio between the extended degree 
and the frame size is less than one, i.e., Vp,- G P : 1 < T jdi. After the convergence period, every node p\ is 
assigned with a broadcasting timeslot, G [1, T], i.e., V/? ; - G P : ((j,- G [l,r]) A (pj G — > s, / sj. Systems 
that do not satisfy the condition V/?,- G P : 1 < T /dj, eventually run into timeslots exhaustion. The algorithm 
indicates that the channel is busy to the nodes for which there was no timeslot left (cf. the Si = _L assignment 



in line 30 1 



During the convergence period several nodes can be assigned to the same timeslot. Namely, we may 
have pi G P : pj G 9^ f\Sj = sj. The algorithm solves such timeslot allocation conflicts by letting the node 
Pi and pj to go through a (listening/signaling) competition before transmitting in its broadcasting timeslot. 
The competition rules require each node to choose one out of MaxRnd listening/signaling period for its 
broadcasting timeslot, see Fig. [TJ This implies that among all the nodes that attempt to broadcast in the 
same timeslot, the ones that select the earliest listening/signaling period win this broadcasting timeslot and 
access the communication media. Before the winners access their timeslots, they signal to their neighbors 
that they won by transmitting beacon. The signal is sent during their choice of listening/signaling periods, 
see Fig. [T] When a node receives a beacon, it does not transmit during that timeslot, because it lost this 
(listening/signaling) competition. Instead, it randomly selects another broadcasting timeslot and competes 
for it on the next broadcasting round. 
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In detail, the MAC algorithm in Fig. [2] is invoked at the start of every timeslot, t. When t is the first 
timeslot, the algorithm tries to allocate the broadcasting timeslot, si, to pi (line 11 1 by randomly selecting 
a timeslot for which there is no indication to be used by its neighbors. Later, when the timeslot t becomes 
Pi's broadcasting timeslot, s,, the node attempts to broadcast (by calling the function sendQ in line 13 ). We 
note that the start of timeslot t also requires the marking of t as an unused timeslot and the removal of stale 
information (line 12 1. This indication is changed when the carrier_sense(?) event is raised (line 27 1 due to a 
neighbor transmission. Namely, when the detected energy levels reach a threshold in which the radio unit is 
expected to succeed in carrier sense locking, see [25]. 

When a node attempts to broadcast it uses the (listening/signaling) competition mechanism for deciding 
when to signal to its neighbors that it is about to transmit a DATA packet. The competition has MaxRnd 
rounds and it stops as soon as the node transmits a BEACON or a neighbor succeeds in signaling earlier 
(lines 18 to 23 1. We note that this singling is handle by the carrier_sense(?) event (line 27). Moreover, 



BEACONs are not required to carry payloads or any other information that is normally stored in packet 
headers. They are rather used to invoke the carrier sense event in 5\£ 

The carrier sense in timeslot t indicates to each node that it needs to defer from transmission during t 
(line 25 1. In particular, it should stop using timeslot t for broadcasting, stop competing and mark t as a used 
timeslot. Lastly, arriving DATA packets are delivered to the upper layer (line[T5|). 



4 Correctness Proof: Outline and Notation 

The MAC task requires that every node can successfully broadcast infinitely often. We start our proof by 
considering wireless ad hoc networks that do not change its topology and for which the ratio between the 
extended degree of node and the frame size is less than one, i.e., V/?, G P : 1 <T/d{. For these settings, 
we consider the task, X TDMA , in which the nodes can access successfully the media once in every broadcast- 
ing round. After showing that the MAC algorithm in Fig. [2] is self-stabilizing with respect to task X TDMA 
(sections [10] to |9] of the Appendix), we consider the time it take to converge within a single neighborhood 
(Section [5]) and the entire neighborhood (Section [6]>. These convergence estimations facilitate the explo- 
ration of important properties, such as predictability, and dealing with changes in the network topology 
(Section [8). 



Proof outline The exposition of the proof outline refers to Definition 4.1 which delineates the different 
states at which a node can be in relation to its neighbors. Definition 4.1 groups these states into three 
categories of relative states: (1) Ready to be allocated, when the node state depicts correctly its neighbor 
states, (2) Obtaining a timeslot, when the node is competing for one, but there is no agreement with its 
neighbor states, and (3) Allocated to a timeslot, when the node is the only one to be allocated to a particular 
timeslot in its neighborhood. The correctness proof shows that the MAC algorithm in Fig. [2] implements 
T TDMA in a self-stabilizing manner by showing that eventually all nodes are allocated with timeslots, i.e., all 
nodes are in the relative state Allocated, see Definition |4.1| 

Let R be an execution of the MAC algorithm in Fig. [2] and R(x) is the jc-th complete broadcasting 
round of R, where x > is an integer. We simplify the presentation by using uppercase notation for the 
configurations, c" ame (x), where t G \\,T] is a timeslot. This notation includes the name of the first event to 
be triggered immediately after configuration c, i.e., R(x) = (co™ slot (jc) , . . . c = a ™ r - sense/receire (x)). 

Definition 4.1. We say that node pi € P is Ready (to be allocated) to a timeslot in configuration cl mes ""(x), if 
properties (jTJ), Q and ^ hold for node pt but Property Q does not. We say that pi is Obtaining timeslot 
S{ in configuration c'f ) mesk "(x), if properties ([TJ to Q hold for node pu but Property Q does not. We say that 
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node pi G P is in Allocated state, with respect to timeslot Si in configuration cl mes! °'(x), if properties (|TJ) to Q 
hold for node p\. 

signal i = false (1) 
(/ € unusedi At ^ s{) <H> (V/?* ^H.'-Sk^t) (2) 
i/^lV unused set, \ {s{} ^ (3) 

*i / -L (4) 
Vjc ; - G 9\d : ((jj ^ jj) A (unused j[sj] = false)) (5) 

Property Q implies that node /?,• finishes any broadcast attempts within a timeslot. Properties (|2|) to ([3]) 
consider the case in which p^s internal state represents correctly the timeslot allocation in its neighborhood. 
In particular, property ([2 ) means that processor pi views timeslot t as an unused one if, and only if, it is 
indeed unused. Property ( 51) implies that when node p; is not using any timeslot, there is an unused timeslot 
at its disposal. Property Q says that node p\ is using timeslot s,\ Property (|5]) refers to situations in which 
Pi's neighbors are not using p,'s timeslot during the next broadcasting round. 

Starting from an arbitrary configuration, we show that node pi becomes Ready within two broadcasting 



rounds (or one complete broadcasting round), see Section 10 of the Appendix. Then, we consider the 



probability, OnlyOnei(x), that a node enters the relative state Allocated from either Ready or Obtaining, see 



equation (|6J) (and sections [Hj and 12 of the Appendix). Namely, equation (|6J) considers the probability that 
node pi is the only one to use its broadcasting timeslot in its neighborhood, where p,t = 1 /MaxRnd = l/n 
is pi's probability to selects the k-th listening/signaling period for transmitting its BEACON. 



(6) 




Theorem 4.2 demonstrates self-stabilization, rather than convergence from an randomized starting con- 



figuration, as in II34I . 

Theorem 4.2 (Self-Stabilization, the proof appears in Section [9] of the Appendix). The MAC algorithm in 
Fig. |2]w self-stabilizing with respect to the task X TDMA . 

We bound the time it takes the MAC algorithm in Fig. [2] to converge by considering the relative states, 
Ready, Obtaining, and Allocated, and describe a state machine of a Markovian process. This process is used 
for bounding the convergence time of a single node (Section[5]>, and the entire network (Section[6]>. 

In detail, give node pi G P, its neighborhood, fA£, we define a random environment of a Markov chain, 
see Fig. [3] By looking at this random environment, we can focus our analysis on /7,'s relative states while 
avoiding probability dependencies and considering average probabilities [9]. Suppose that p,'s environment, 



e, is known. Theorem 5.1 estimates two bounds on the expectation of probability, qi \ e , which is literally the 
probability given that the environment is e. 

In order to do that, we consider a set, of executions of the MAC algorithm, such that each execution 
R € %^ starts in a configuration, c G R, in which: (I) for any node pj G P, properties Q, Q and ([5]) holds, 
and (II) node pt is in the relative state Ready, which implies that (III) eventually, node pj arrives to the 
relative state Allocated. 

With this convention, we can add a probability 1 to transit from the relative state Allocated to Ready, see 
the dashed line in the state-machine diagram of Fig. [3] This allows us to estimate the expected time to reach 
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We look at p,'s state transition with relation to its neighbors, see Definition |4~T 







J Allocated I 



The figure on the right defines p,'s relative states as a 3-state Markov chain. The 
probabilities, qi, wu fu and hi (solid lines arrows), that node p\ change its rela- 
tive state depends on its neighbor's state. For instance, qt is the probability that 
Pi goes from the relative state Ready to Allocated. It is environment dependent, 
i.e., the states of p,'s neighbors are random as well. We add the dotted edge 
between the state Allocated and the state Ready in order to make the Markov 
chain irreducible and to allow working with the invariant probability. Namely, 
once node pt arrives to Allocated, it returns to Ready with probability 1. With 
this convention, we can estimate the expected time to reach the final relative 
state Allocated from relative state Ready by the expectation of the first hitting time of the irreducible 
chain [fJl 



Figure 3: Markov chain describing pi's relative state transitions. 



the final relative state Allocated from relative state Ready by the expectation of the first hitting time of the 
irreducible Markov chain 0. 

When computing the expected time for node /?, to reach state Allocated within its neighborhood, we see 
that it is sufficient to consider the lower bound of the probability Only One j{x) to obtain an upper bound on 
the expected time to converge, see section [5] Moreover, when considering the network convergence time, 
i.e., the expected convergence time of all nodes in the network, we see that the most dominant parameter is 
the mean neighborhood size. We do that by applying the AM-GM (Arithmetic Mean vs Geometric Mean) 
inequality and bounding the expected network convergence time, see Section|6] 

Notation Throughout the paper, we denote the states of the Markov chain by {X t } t >o, T { + = 
min{? > such that X t = i} and Ei (•) is the expectation given that we start in relative state i, Ej = 
E (T^ I Xq = z) . In this paper, the states 1, 2, and 3 of the Markovian process correspond respec- 
tively to states Ready, Obtaining and Allocated, and the time t = 0,1,... corresponds to configuration 
c^ meslot (x + 1) G R(x + t), where R(x) is the first complete broadcasting round in R that starts in a configu- 
ration, C Q meslot (x), in which all nodes are in the relative state Ready. For example, £3 (T 3 + ) is the expected 
time to reach the Allocated state. 

Let pi sPbea node for which / 1 A 3pj G *Hi : Sj = J,- in configuration c<j meslot (x). We define Mj(x) = 
{Pj G 0\d : s, ■ = sj} to be the set of p,'s (broadcasting timeslot) matching neighbors, which includes all of p,'s 
neighbors that, during broadcasting round R(x), are attempting to broadcast in pfs timeslot. In our proofs, 
we use n as the number of listening/signaling periods, MaxRnd. 



5 Convergence within a Neighborhood 



Theorem 5.1 bounds the expected time, Si, for a node to reach the relative state Allocated, and follows from 



Proposition 5.3 and equation ( 12 ). Note that Si < 4 when the number of listening/signaling periods is n > 2, 



and considering saturated situations in which the extended node degree dj < T is smaller than the TDMA 
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Observation of the max convergence time, N=500, r=0.1 



Observation of the max convergence time, N=2500, r=0.1/sqrt(5) 



Observation of the max convergence time, N=5000, r=0.1/sqrt(10| 




Figure 4: Numerical validation of Theorem |6.2[ s bound on the network-wise convergence time. We 
compare the bound, P(t max < k) = (1 — (1 — q) k ) N , with the numerical results, which consider random 
geometric graphs in which the nodes are randomly placed on the unit square. The charts considers 
N £ {500,2500,5000} nodes (from left to right). All experiments considered 2 listening/signaling peri- 
ods, interference range of O.l/y^^,), which result in an average extended degree of 15, dj/T = 1 on 
average, and g,- = 1 /4. 



frame size. Namely, the proposed algorithm convergence with a neighborhood is brief. 

Theorem 5.1 (Local Convergence). The expected time, Si, far node pt £ P to reach the relative state Allo- 
cated satisfies equation Q, where n is the number of listening/signaling periods, T the TDMA frame size, 
and dj is pt 's extended degree. 



(7) 



We look into the transition probability among relative states by depicting the diagram of Fig. [3] as an 
homogeneous Markov chain. We estimate the diagram transition probabilities in a way that maximizes the 
expected time for reaching the diagram's final state, Allocated. It is known that the first hitting time is given 
by E\ = where % = (711,712,713) is the invariant probability vector Q. Let.5,- be the expected time it 
takes node p\ that starts at the relative state Ready to reach Allocated. It is clear that S\ = T^~ — 1, because 
T 3 + — 1 is the return time of the relative state Allocated. In our case, the transition matrix P is given by 
equation ([8]). 

fl-fi-H fi <li\ 
P=\ k l-ht-Wi Wi (8) 
V 1 0/ 

The invariant probability vector 7t satisfying %P = 7t is given by equation Q. 

(hi + w h f , qih + q t Wi + fwA 

7C = — — (9) 

hi + Wi + f + hqi + q(Wi + fm 

The estimation of the maximal expected time necessary to assign the node pi to a timeslot requires to 



compute bounds on the probabilities f, hj, qi and Wi that maximize equation ( 10) 



17 fr+\ 1 h + Wi+fi + hqi + qiWi+fm 

TC3 qm+qiWi+fwi 
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The expected time for pi to reach the relative state Allocated is bounded in equation (11). 



S i =E 3 (T+)-l 



hj + Wj+fj 
qihi+qiWi + fjWj 



(11) 



Equation Q has a compact and meaningful bound for equation ( [IT] ). We achieve that by studying the 
impact of the parameters T and n on the MAC algorithm in Fig. [2] Lemma 5.2 and equation ( 11 ) imply 
equation (fl2|). 



Si< 



hj + Wj + fj __ 1_ 
qihi+qiWi+ fiq t q t 



(12) 



Lemma 5.2. Suppose that n>2is the number of listening/signaling periods, see line^ofthe code in Fig. [2] 
Then w, > g,-. 

Proof. Let us consider node pi 6 P that is in relative state Ready. Given that p\ has v; neighbors that compete 



for the same timeslot, the probability that p, gets allocated, g,- | Vj , is given by equation ( 13 ). 



n-l 



H k= £p*(l-pi 



(13) 



*=i 



Consider next that /?,• is in relative state Obtaining, and thus we know that p\ transmitted during the preceding 
broadcasting round and transited from relative state Ready to Obtaining. Moreover, pi is using the same 
timeslot for the current broadcasting round. The only neighbors of pi that are using the same timeslot are 
the neighbors that are also in relative state Obtaining and, have chosen the same listening/signaling period 
as pi during the preceding broadcasting round. Let us denote by £j the number of such neighbors. Given l\ 



the probability w\ \(. that p\ is allocated to the timeslot is given by equation ( 14 ). 



n-l 



Wi \ii= £p;t(l-pi 



■p*r 



(14) 



k=\ 



We have that i[ is stochastically dominated by v ( - HOI , i.e., E(£i) < E(vi). Indeed, v, is a random variable that 
counts the number of neighbors that choose the same timeslot as p\ while l{ counts the number of neighbors 
that choose the same timeslot and listening/signaling period as p,. For n > 2, £,'s expected value is smaller 



than Vj's expected value. To conclude, we remark that expressions (13) and (14) are the same decreasing 
function, — > Y2=i P>t(l — Pi — •■• — PkY', that is evaluated at two different point, v, and li respectively. 
Moreover, since i, is stochastically dominated by v,-, equation ( [T5] > holds. 

E(wi \e,) >E(qj | Vf ) =q t 



Wi 



(15) 



□ 



Proposition 5.3 demonstrates equation ( 16 ) and leads us toward the proof of Theorem 5.1 



Proposition 5.3. Let p, = 1 /MaxRnd. Equation (16) bounds from below the probability qj, see Section 12 
of the Appendix. 
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The first bound, A < (^r) r (equation (7 )), has a simple intuitive interpretation. Let us consider first 
that two nodes compete for a same timeslot. The two nodes choose independently any of the n listening/sig- 
naling periods and there are n 2 different possible outcomes. Among these outcomes n correspond to the 
situation where the two nodes choose the same listening/signaling period and there is no winner. We then 
have n 2 — n = n(n — 1 ) outcomes that lead to a winner. There is then a probability of n(n — 1 )/n 2 = (n — 1 )/n 
that one of the node wins the (listening/signaling) competition. Since the game is symmetric, the probability 
that pi wins is (n — 1)/ (2n). The fact that we have T timeslots divides the number of competing nodes, dt, 
and imply that there are di/T competing nodes to the same timeslot. If we interpret the game as a collection 

of di/T independent games, where for each game p\ wins with probability (n — 1)/ (2n). Thus, the proba- 
b- 
ility qt that pi wins is (^r) T ■ The inverse of this expression gives the average time for the event to occur 

and is the bound by equation Q. 

6 Network Convergence 

We estimate the expected time for the entire network to reach a safe configuration in which all nodes are 
allocated with timeslots. The estimation is based on the number of nodes that are the earliest to signal 
in their broadcasting timeslot. These nodes are winners of the (listening/signaling) competition and are 
allocated to their chosen timeslots. However, counting only these nodes leads to under-estimate the number 
of allocated nodes, which then results in an over-estimation of the convergence time. Indeed, node pj G P 
might have a neighbor pj G 9(i that selects the earliest listening/signaling period in 9*&, but pj does not 
transmit because one of its neighbors, G 9{j \ 9^i, had transmitted in an earlier listening/signaling period. 
Our bound consider only p^ while both p\ and p^ transmit, became pj is inhibited by p^s BEACON. 



Lemma 6.1 shows that the assumption that the nodes are allocated independently of each other's is 



suitable for bounding the network convergence time, 5- Theorem 6.2 uses Lemma 6.1 for bounding the 
network convergence time, S- 

In Section [5] we prove a bound on the expected time, Si, for a single node to be allocated to a timeslot. 
We observe that the bound depends uniquely on the number of listening/signaling periods, n, as well as the 
ratio between the extended degree and the frame size, di/T. In order to obtain a bound valid for all nodes, 



we bound this ratio with x/T where x is as defined in Lemma 6.1 We note that the time needed for the 
allocation of timeslots to all the nodes depends on ,/V, the total number of nodes. 

In detail, the convergence time estimation considers the (fixed and independent) bound, qt, for the prob- 
ability that a node reach the relative state Allocated within a broadcasting round. Then, the convergence 
time, t, is a random variable with geometric probability, i.e., P(t = k) = ( 1 — q) k ~ l q. Let us denote t\, . . 
the time it takes for the nodes p\, . . .p^ to respectively reach the relative state Allocated. The convergence 
time, S, for all the nodes is given by max({fi , . . . t^}), which depends on ,/V. 

Lemma 6.1. The expected number of nodes, E(W), that win the (listening/signaling) competition after one 



broadcasting round satisfies equation (17), where x = 2 4-, T is the number of timeslots, A the number of 



edges in the interference graph, G, and N = \ P \ the number of nodes that attempt to access the communi- 
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cation media. 



E(W)>N^ Pj (\-( Pl + ... + p0 



(17) 



7=1 



Proof. The nodes that are allocated to a timeslot can previously being on relative state Ready or Obtaining. 
The probability of a transition from relative state Obtaining to Allocated is w,, and, a transition from relative 



state Ready to Allocated is g,. As proved in Lemma 5.2 we always have w; > qt. To bound the number of 
nodes that get allocated during a broadcasting round, we use the lower bound on the probability qi that a 
node gets allocated to a timeslot. Moreover, in the computations, we use the AM-GM bound 11461 . which 



says that if = 1 then Y\a h k k < YJ^k^k and, denote di the number of neighbors of node p\. As proved in 



Proposition 12.1 since there are T timeslots the number of neighbors of i that choose the same timeslot as 



i and compete for it is bounded by di/T . This lemma is proved by equation ( 18 ), where the last line of the 
expression holds because Y,idi = 2A- 



E(W)> (18) 

/N \ 
E I 1 1 Di selects the earliest signaling period I 



v i=l 



n-1 \T 



L Pl (1 "Pi) 7 " +---Pn-1 l-£p4 
i=l \ \ k=l / 

'h 

n N i / i \ T 
y'=i '=i iV V k=l J 



n N i / 



y=i (=1 



./ 

I 

/t=i 



(19) 



^EP;(1-Ep* 



/t=i 



7=1 V 4=1 , 



We note that we use the AM-GM bound to reach the 4-th raw of equation ( 18 ). 



□ 



By arguments similar to the ones used in the proof of Proposition 5.3 we deduce that if Af nodes compete, 



the expected number E(W) of nodes that get allocated to a timeslot is lower bounded in equation (20). 

E(W) > Nmax ' ' "~ 1 ^ 



2/7 



'n-l\ T+ l 



f + 1 



(20) 



Theorem 6.2 bounds the system convergence time (see the proof in Section 13 of the Appendix). 
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Theorem 6.2 (Global Convergence). The expected number of retransmissions is smaller than {^z\) d ^ T — 1, 
where d = max({(i, : /?, 6 P}). Hence, we have that the expected number of broadcasting rounds, 5, that 



guarantee that all nodes to reach the relative state Allocated satisfies equation (21 ). 

Moreover, given that there are N nodes in the network and 0C G (0, 1), the network convergence time is 



bounded by equation ( 22 ) with probability I — a. 



log (l - tyl=a) 
1 + -4" ( 22 ) 



log \ \ -<^ T 



This means that with probability a all nodes are allocated with timeslots in maximum k broadcasting rounds, 
see Fig. Q. 

We numerically validate Theorem 6.2 see Fig. [4j Moreover, our experiments showed that the average 



convergence time of the network is below the upper bound of equation (21 ). 



7 Implementation 

Existing MAC protocols offer mechanisms for dealing with contention (timeslot exhaustion) via policies 
for administering message priority, such as IT391 . In particular, the IEEE 802 . lip standard considers four 
priories and techniques for facilitating their policy implementation. We explain similar techniques that can 
facilitate the needed mechanisms. 

Peritonized listening/signaling periods One can consider listening period parameters, [LSP start , LSP en d), 
that refer to the first, and respectively, the last listening/signaling periods that a node can use when attempting 
to acquire a broadcasting timeslot. E.g., suppose that there are six listening/signaling periods, and that nodes 
with the highest priory may use the first three listening/signaling periods, [0,2], and nodes with the lowest 
priority may use the last three, [3,5]. In the case of two neighbors with different listening period parameters, 
say [0,2] and [3,5], that attempt to acquire the same broadcasting timeslot, the highest priority node always 
attempts to broadcast before the lowest priority one. 

TDMA-based back-off Let us consider two back-off parameters, CW sta rt and CW enc t, that refer to the 
maximal and minimal values of the contention window. Before selecting an unused timeslot, the procedure 
counts a random number of unused ones. Fig. [5]presents an implementation of the selecLunusedQ function 
that facilitates back-off strategies as an alternative to the implementation presented in line 29 of Fig. [2] 



The statically allocated variable count records the number of backoff steps that node /?, takes until it 
reaches the zero value. Whenever the function selecLunusedQ is invoked with county = 0, node p\ assigns 
to county a random integer from [CW start ,CW en d] (cf. line [7]). Whenever the value of count j is not greater 
than the number of unused timeslots, the returned timeslot is selected uniformly at random (cf. lines [8] 
to[9]>. Otherwise, a L-value is returned after deducting the number of unused timeslots during the previous 
broadcasting round (cf. lines[6]and 10 1. 



8 Discussion 

Thus far, both schedule -based and non-schedule-based MAC algorithms could not consider timing require- 
ments within a provably short recovery period that follows (arbitrary) transient faults and network topology 
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Additional constants and variables 

2 CW s tart and CW e „j : backoff parameters 

count : statically allocated variable that counts the backoff steps 

4 

Function select_unused(se;) 
6 let rtn.val = _Lv / / indicate busy channel (default return value) 

itcount < Otheacount <— uniform_select([CW st art,CW eni i]) 
8 count <— count— \ set 

Si count < Othen (count .rtn.val) <— (O,uniformselect(set)) 
10 return rtnjval 



Figure 5: select_unused() with TDMA-based back-off 



changes. This work proposes the first self-stabilizing TDMA algorithm for DynWANs that has a provably 
short convergence period. Thus, the proposed algorithm possesses a greater degree of predictability, while 
maintaining low communication delays and high throughput. 

In this discussion, we would like to point out the algorithm's ability to facilitate the satisfaction of severe 
timing requirements for DynWANs by numerically validating Theorem 6.2 As a case study, we show that, 
for the considered settings of Fig. [4j the global convergence time is brief and definitive. Fig. [6] shows that 
when allowing merely a small fraction of the bandwidth to be spent on frame control information, say three 
listening/signaling periods, and when considering 99% probability to convergence within a couple of dozen 
TDMA frames, the proposed algorithm demonstrates a low dependency degree on the number of nodes in the 
network even when considering 10,000 nodes. We have implemented the proposed algorithm, extensively 
validated our analysis via computer simulation, and tested it on a platform with more than two dozen nodes. 
(This technical report can be made available.) These results indeed validate that the proposed algorithm 
can indeed facilitate the implementation of MAC protocols that guarantee satisfying these severe timing 
requirements. 

The costs associated with predictable communications, say, using base-stations, motivate the adoption 
of new networking technologies, such as MANETs and VANETs. In the context of these technologies, 
we expect that our proposal would contribute to the development of MAC protocols that can be used by 
applications that needs guarantees for severe timing requirements. 
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Appendix 



9 Theorem 14^21 



Theorem 4.2 shows that all nodes are allocated eventually with timeslots (convergence) and once all nodes 



are allocated, they stay this way (closure). We note that Theorem PO refers to Proposition 11.2 



Theorem [33J (Self- Stabilization) The MAC algorith m in Fig. ^is a self-stabilizing algorithm with respect 
to the task x^, . ■ 



Proof. • Convergence 

Co meslo, (;c + v) for a finite value of y > 0. Propositions 
respectively, ^ within two broadcasting round. 



We need to show that properties Q to ^ eventually hold in configuration 

and fT073] imply that properties (flj), ([2|), and 



10.1 



10.2 



Propositions 1 1 1 . 1 1 1 1 1 .2 and 11.3 show that there is a nonzero probability that node p\ enters the relative 
state Allocated from either Ready or Obtaining within one broadcasting round. Thus, by the analyzing the 
expected time of the scheduler-luck games lPT6l[T8l . we have y has a finite value. 

• Closure Suppose that c* meslot (x) G R is a safe configuration and let pi G P be any node. By the assumption 
that Co meslo, (x), we have that pi is in the relative state Allocated, i.e., properties (jTJ) to (|5j) hold for any node 
Pi. We need to show that properties (TJ) to (]5) holds in configuration c5J meslol (x+ 1). 

Propositions 10.1[|10.2| and 10.3 imply that properties Q, Q, and respectively, ^ (within one com- 
plete broadcasting round). 

Properties Q to ^ are implied by Proposition |1 1.3| and the fact that Properties Q to ^ holds in 
(x), i.e., M(x) = 0. □ 



^timeslot 
c 



10 Properties to © 



Propositions 1 1 0. 1 ] 1 1 0.2| and 1 10. 3 imply that properties 0, Q, and respectively, ([5]) hold within two broad- 
casting rounds (or one complete broadcasting round). Let R be an execution of the MAC algorithm in Fig. [2] 
x > an integer, and Co meslot (x) the first configuration in a complete broadcasting round R(x) = (co meslot (x) , . . . 
c carrier.sense/receive yj Q nQte ^mesiot ^ f u ows an arbitrary starting configuration. 

Proposition 10.1 shows that, within a broadcasting round from Co meslct (x), Property (TTT) holds. 



Proposition 10.1. In c' imes ""(x-\- 1), it holds that signalj = false. 



Proof. The value of signal] is updated in line 18 (assigned to true) and in lines 12 20 and 27 (assigned to 
false). Let us look into these assignments. 



In every timeslot, the value false is assigned to signalj (cf. line 12 1. Suppose that the function sendQ is 



called, and thus, true is assigned to signal^ (line [T8|). We proposition that before returning from the function 
sendQ and after true is assigned to signalj (line |18|>, node p, must assign false to signalj either in line 20 



or [27] To see that, let us look at lines[T8tand 19 Eventually either signalj = false (because of an assignment 



in line 27 1 or p(&) = true (line 19 1 holds (note the condition when k = MaxRnd). The latter case implies the 
execution of line |20] □ 



Proposition 10.2 shows that, within a broadcasting round from Co meslo, (x), Property Q holds 



Proposition 10.2. (3t G unusedjsetj \ {sj}) o ($p k e^.:s k = t) in Co raes,of (x+ 1). 
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Proof. Recall that unused jsetj = {k : unusedi[k] = true} (see line[6]) and that the proposition statement does 
not consider the cases in which: (1) st = Sk (because t ^ Sj) in c[J mes ""(;t+ 1), or (2) There exists a configuration 
c G R(x), such that Sk ^ _L in c and Sk = _L in Co meslot (x + 1) (because by unused set's definition, _L is never 
in unused seti). 

We note that in every broadcasting round, node pk G P at most once: (1) Allocates the broadcasting 
timeslot Sk (when tk = 0, see line 111, (2) Transmits a packet (when t% = Sk, see line [13]), and (3) Deallocates 
the broadcasting timeslot s& (by assigning _L to Sk when tk = Sk and the carrier_sense(?) event is raised, see 



line 26 1. Moreover, node p\ updates unusedi[t\ only in lines 12 (true) and 27 (false), when pt removes stale 



information just before timeslot t, and respectively, when the event carrier_sense(?) is raised. 



Line 12 is executed at the start of every timeslot, whereas line 27 is executed after, and only when the 
event carrier_sense(?) is raised. The event carrier_sense(?) is raised after, and only when the node pk£*Hi 
transmits in timeslot t. In other words, none of p,'s neighbors, pk G 0\d, that transmits in timeslot Sk = t, can 
avoid causing the event carrier_sense(?) to be raised, and timeslot t to be included in unusedseti \ {si}. □ 



Proposition 10.3 shows that, within a broadcasting round from c[j mesl0, (^), Property (pj) holds. 



Proposition 10.3. (sj ^ _L) V (unusedseti \ {st} / 0) holds in c'^ es ""(x + 1 



Proof. If Si ^ _L in cl mesM (x+ 1), we are done. Let us suppose that j; = _L in Co meslot + 1) and show that 

0and show that d t /T > 1, 



unusedseti \ {s^ / in cJT 8 ' ' (x+ 1). 



Let us assume, in the way of proof by contradiction that, unusedseti \ {sf\ 
i.e., a contradiction with the assumption that V/j,- G P : dj/T < 1. 

Recall that unusedseti = {k : unused,- [k] = true} C [1,7] (see line [6]). Therefore, the assumption that 
si = _L implies that unusedseti = unusedseti \ {sj} C [l,T], because by unusedset's definition, _L is never 
in unusedseti. 

By Proposition 10.2 we can say that Vf G [l,T] : ($t G unusedseti) o (3pk G : Sk = t). Since 
unusedseti C [1 , T], we can write [1, T] \ unusedseti C G [1 , T] : pt G i'Vi}. By the fact that unusedseti = 
0, we have that T <| {sk £ [1,T] : pk £ ^} |. Since d\ =| fA^ | (by definition), we have that | {j* G : 
Pa G fA^} | < which implies T < dj\ a contradiction with the assumption that dj/T < 1. □ 



11 Properties (ph to 



Section 10 of this Appendix shows that, starting from an arbitrary configuration, node pi G P enters the 



relative state Ready within two broadcasting rounds. This section shows considers the probability for pi to 
enter the relative states Obtaining and Allocated. 

Let x > and R be an execution of the MAC algorithm in Fig. |2j Suppose that cU meslot (x) is the first config- 



uration in a complete broadcasting round R(x) for which properties Q to (|3 ) hold in configuration c* 
with respect to node pi G P, i.e., pi is in relative state Ready, Obtaining or Al ocated. Propositions |1 l.l||l 1.2 



and 11.3 show that there is a nonzero probability that node pi enters the relative state Allocated from either 
Ready or Obtaining in configuration cT esto, (x+ 1). 

Proposition 1 1 1 . 1 1 shows that pj attempts to broadcast once in every round. 



Proposition 11.1. During broadcasting round R(x), pi executes line 13 and calls the function send() 



Proof. If Si / _L in Co mesl01 (x), we are done by lines[TT]and 13 Let us consider the case of Sj = _L in Co meslot (x). 
By Property Q, unusedseti / and thus when line 11 is executed, the function select_unused() returns a 
non-_L element from unusedseti and s, ^ _L when executing line 13 □ 
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Defining optimal transmission probabilities for any choices of T,n,di is not possible. We choose 
to consider and look for optimal choices when d[ ~ T (the 'hard' case) and make a case for a 
uniform probability p,- = - : i G [l,n]. 

Let us consider node p, G P that competes, together with k — 1 other neighbors, for the same 
unique timeslot. The probability that node pj wins the (listening/signaling) competition is 
Pi (1 — pi) , where pi is the probability of choosing the first listening/signaling period. The 
value pi = I maximizes this probability. In the more general case where there is more than one 
timeslot, we consider a strategy that aims at guessing the number, k, of competing neighbors, 
which the optimal probability of transmission depends on. During the first listening/signaling 
period, the strategy considers the case in which there are n = MaxRnd singling nodes, and thus, 
the transmission probability is 1 /MaxRnd, where MaxRnd ~ T. During the second listening/sig- 
naling period, the strategy considers the case in which there are MaxRnd — 1 neighbors, and thus, 
the transmission probability is 1/ (MaxRnd — 1), and so on. This sequential selection of the lis- 
tening/signaling period leads to a uniform choice of a listening/signaling neighbor. The above 
strategy is driven by a heuristic in which nodes signal with probability that is optimal for the case 
of n ~ T, and thus, it depends on the number of competing neighbors. 



Figure 7: Transition probability, p,, for listening/signaling periods (line[T9]in Fig. [2]) 



Propositions 11.2 and 11.3 consider the set M/(x+ 1) = {pk E%&:si c = t'} and the number m, = |M,-(x+ 
1)| of pfs neighbors that attempt to broadcast during p ; 's timeslot, t', of broadcasting round R(x). 

Let pj be the probability for p\ to transmit in the j-th listening/signaling period of timeslot t' (cf . line 19 1. 
This paper considers the concrete transmission probability p, = 1 /MaxRnd. We motivate our implementa- 
tion choice of the transmission probability, p,-, in Fig. [7] Note that the sequential selection of the broadcasting 
rounds with probability 1 / (MaxRnd — k+l) leads to the uniform selection p,t = 1 /MaxRnd. 



Proposition [TL2 considers pi's chances to be the only one to transmit in its neighborhood. 



Proposition 11.2. There is a nonzero probability, OnlyOnej(x) (cf. equation (23)), that only node pi trans- 
mits in its broadcasting timeslot, t', of broadcasting round R(x). 



OnlyOnei(x) | m , >0 = pi(l - pi)'"' '+p 2 (l 
+ ... + p„-l(l 



Pi -p2 



1 7)7, 



(23) 



Proof. We show that there is a nonzero probability that only node transmits in its broadcasting timeslot, 
t', of broadcasting round R(x). Let us look at pt and the nodes in M,-(x) while they attempt to broadcast in the 
steps a • meslot ''' (x) and a * meslm ''' (x)\ keMj ^ x y All of these steps include the execution of line 
chooses to transmit in listening/signaling period I G [0, MaxRnd] with probability pi = 
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viz., each node 
T/ (MaxRnd — I). 

Therefore, for any MaxRnd > 0, there is a nonzero probability, OnlyOnei(x) that, during timeslot t' , node p\ 
transmits in the listening/signaling period a G MaxRnd and no node in M, (x) transmits in round a (or in an 
earlier one). 

We note that the fact that p\ transmits first during timeslot t' implies that it is the only to transmit during 
t'. This is because once pt transmits a BEACON in step fa ,^ ,meslot -' / ^ (which includes the execution of line 21 1 
node Pj^'Mi^l Mj(x) raises the event carrier_sense(£') immediately after a J meslot '' ( x ). Thus, \/pj G M,(x) we 
have that immediately after step a* meslot '' (x) , node pj takes step a J ^^le^ ■ sense •' ( x ) s which includes the execution 
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of lines 26 and 27 that assigns _L to sj and false to signal j. Thus, pj leaves the (listening/signaling) 
competition for timeslot t' (see line 18 1 and does not transmits its DATA packet (see line 23 1. 

We now turn to calculate Only One j[x). Let the variable m, =| Mj(x) | denote the number of nodes that 



select the same timeslot as p\ in configuration c, 



timeslot: 



(x). The value of OnlyOnej(x) depends on the value 



of ntj and we denote this dependence with the notation q(i) \ m (conditional probability). It means the value 
of OnlyOnei(x) depends on the value of ra,-. The value of OnlyOnej{x) for m, = is OnlyOne{(x) | m ,=o= 1- 



For the case of ra; > 0, OnlyOnei(x)'s value is given by equation (23 )) (that appears again below), where pj 
is the probability for transmitting in the j'-th listening/signaling period. 



OnlyOnei(x) \ m>0 
+ ... + p„-i(l 



p 1 (i- Pl r+p 2 (i- Pl -p 2 )' 1 



[clone of equation (23 )] 



We note that the j-th term in equation (23 ), is the probability that node pj selects the j-th listening/sig- 

□ 



naling period and all its neighbors select a later listening/signaling period. 



Proposition 11.3 shows that once a node is the only one in its neighborhood to transmit during its 
broadcasting timeslot, it enters the relative state Allocated. 

Proposition 11.3. M,-(x) = (or having none of the nodes in M,-(x) transmitting during timeslot t') implies 
that node pi is in the relative state Allocated in cl mesl0 '(x+ 1). 

Proof. We need to show that, in c|j mes "" (x + 1), we have that s t = t' ^ _L and Vpj G 3\£ : ^ Sj. 
Showing that s, 
show that s 
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t' ^ _L in c|j mesl ° t (x+ 1) The proposition assumes that t' / _L in cf es,ot (x). We wish to 
(x+ 1), which implies that Sj / _L holds in Co meslol (x + 1) and throughout R(x+ 1). 

0) and[26](when tj = t'), it is sufficient to show 



t 1 in cfT 510 ' 



Since the variable si is assigned only in lines 1 1 (when ?, 



is not executed by any step during timeslot t' of broadcasting round R(x), i.e., fl ,° amer - sense ■' ( x ) g 



that line 

R(x). 

Node pi raises the event carrier_sense only during timeslots in which p^s neighbor, pj, transmits. By 
the proposition assumptions that, during timeslot t' of broadcasting round R(x), none of p,'s neighbors 



transmits, we have a ^ mer sense ' ( x ) ^ R(x). Moreover, ^ Imesl01 ^' (x + 1) does not includes an execution of line[Tl] 
that changes the value of su because Si = t' ^ _L in Co meslot (x+ 1^ 

„timeslot^ + ^ 



Showing that \/pj G fJ\fa : Sj / sj in c'o" 



The proposition assumes that \/pj G 9(i : Sj ^ sj 



: n ^timeslot 
ill t 



We wish to show that the same holds in cl mes>ot (x+ 1). Since the variable s; is assigned to 



a non-_L value only in line 1 1 when tj = 0, it is sufficient to show that when line 1 1 is executed in step 



fl l™ 8 ,0 (x+ 1) the function select_unused() considers a set that does not includes p/'s timeslot, Sj. This is 



implied by the facts that \/pj £ 9{i : unused j[t'} 
proof) in cl™ sM (x+ 1). 



false (Claim [TTTT] > and Sj 



(first item of (II) of this 

□ 



12 Bounding OnlyOneiix) 



Propositions 5.3 and|12.2|bound OnlyOnej(x)'s value, where R(x) is the x-th broadcasting round in execution 



R of the MAC algorithm in Fig. [2] We assume that properties ([!]) to ^ holds in the first configuration, 
Co meslot (x), of R(x). These bounds are obtained by computing the expectation of qi \ m . with respect to m,-, 
where Mj (x) = {pk E Sk = t'} in d mesM (x) and m; = |M,- (x) \ . The reason is that m,- is a random variable, 
i.e., qi = E (OnlyOne{(x) \ m ), where the expectation is computed with respect to the random variable m,-. 
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We note that all the terms in equation (23) are convex functions of m,-. This means that by Jensen's 
inequality, we obtain a lower bound of qi in equation (24) by evaluating the expression qi \ m at mfs expec- 
tation, E(rrii) l26ll . 



qi 



E(qi 



> 



H \E(mj) 



(24) 



The expression on the right side of the inequality can be again lower bounded if we estimate an upper 



bound for E(mi). We proceed to the computations in the proof of the Proposition 12.2 after demonstrating 



Proposition 12.1 which shows that E(mj) is bounded by the ratio di/T, which is rather intuitive but, needs 
to be proved. 

Proposition 12.1. In configuration cl mesht (x) in holds thatE(m\) < di/T, where m,- = |M,-(jc)|. 

Proof. We show that E(mi) = di/T by considering configuration ct" eslot (x). The maximal number of p,'s 
neighbors that might choose the same timeslot as pi in configuration cl™ slot (x) is Lp ; es\£ l{ lSj= j_}, because 
any node, pj G fftfo, that chooses a new broadcasting timeslot immediately before ct" eslot (x) must have sj = J_ 
in configuration Co meslct (.x). We compute the expected value of m, in equation (25) as a function of the 



number of empty timeslots, e,, that pi selects from when choosing a new broadcasting timeslot, where e\ 
| unused. set i | in configuration cl mesto[ (x). 



E (nii) 

Y J E{m i \s i =t)?v{s i =t) 

teEi 

E —E (mi | si = t) 

teEi e ' 



(25) 



E I 1 chooses timeslot ;} I &i t 



e, > T — L p gs\£ l{sj7^_L}» we obtain equation (26). 



Our assumption that d[ <T — 1 implies that e\ > 0. Using that d\ = L P/ g9^ (^{sy^-L} + ^{sj=±}) an d> 

v l {teEj}l{ Sj =±} 



teE, r -^ + Ip J G^ 1 {.s7=±} 



7'-d/ + I-. e ^l{ i ,=±} 



{^=-L} 



/ =J -> p;G=A£ 1 J 1 



E l{«6By} 



\EiC\Ej\ 



(26) 

□ 
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Proposition 12.2. 



ft > £ pk i - £ p* 



fc=i 



[clone of equation (|6 



Proof. Proposition 12.1 shows that E{nij) <dj/T. The proposition is demonstrated by evaluating expression 
(23 ) at E(nii) = di/T, see equation (24 ). □ 



Proposition 5.3 considers the concrete transmission probability p,- = 1 /MaxRnd. 
Proposition 5.3 Let p,- = 1 /MaxRnd. Equation ( 16 ) bounds from below the probability qi. 

Proof. In this proof, we use the letter n instead of MaxRnd for reason of space. We replace p, with 1/n in 
equation (l6j) to obtain equation (27 ). 



>I 



1 



k=\ 



(27) 



Equation (28 ) is more compact than equation (27 ) and it is obtained by the fact that the function (1 — x) s 
is convex. 



> 



1 - 
I 



2n 



k=\ 



n i / u\t 

ti n v « 

i _ 
A:\ T ( n-k+l\ T 

1-- + 1 

n I V n 



> 



(28) 



1 " / n + 1 \ ' 
(convexity) - / I 1 



In 



n + l\ T 



2n 



Another way to bound equation (27) is by considering the decreasing function y — >■ (1 — y) x , as in 



equation ( 29 ) 



MA j 



t=i " v " 

1 / 1\ T 
f + 1 V " 



(29) 



□ 
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13 Theorem 



6.2 



Theorem 6.2|b ounds the system convergence time. 



6.2 



Theorem 

where d = 

guarantee that all nodes to reach the relative state Allocated satisfies equation (21 ). 

d/T 



In \d/T 



1, 



(Global Convergence) The expected number of retransmissions, is smaller than f^rr) 
max,{<i,- : dj £ P}. Hence, we have that the expected number of broadcasting rounds, S, that 



S< 



2n 
n-l 



[clone of equation (21 )] 



Moreover, given that there are N nodes in the network and (X G (0, 1), the network convergence time is 



bounded by equation ( 22 ) with probability 1 — OC. 

log(\-^Y^a) 



k=l + 



log [l 



d 

'n-\\ T 
> 2n I 



[clone of equation (22)] 



This means that with probability a all nodes are allocated with timeslots in maximum k broadcasting rounds, 
see Fig. ((61). 



Proof. Theorem 5.1 bounds the convergence time of a particular processor, see equation Q. Lemma 6.1 



see equation (20 1 E(W) > N^-^yl 1 ', proves that this bound is still valid if we replace the term di/T 



with x/T , i.e., we consider the average degree instead of the particular degree of a node. If we replace 



x/T by max{dj}/T in expression (20 1 we obtain a larger bound because x/T < max{<i,}/r, i.e. E(W) > 

N(jt=±y/T > N(^-!-) max Wj'/ r . 

The bound E(W) > N( n ^ L ) max ^ di ^ T and the discussion in the 1st paragraph of section^ show that the 
number of processors that are allocated during a broadcasting round is bounded by the random variable 
Y!i=\Zi, where z.i are identically and independently distributed random variables that are 1 with probability 
C^-) max ^ di ^ T and with probability 1 — )max{</ ; }/r secon(1 random variable dominate the first one, 
see 071 ). This means that we lower bound the number of processors that are allocated if we consider that 
they are allocated independently with probability (n__l) max M}/ r _ 

While the processors get allocated to a timeslot, the parameters dj and T change because some timeslots 
are no longer available (T decreases and some nodes are allocated d[ decreases). Actually the ratio becomes 
max^rf,} h, ^ w j iere n . -> y. because if a timeslot is allocated or sensed used by processor p\ then T, the number 
of available timeslots decreases by 1 and du the number of competing nodes, must decrease at least by 
one since there must be at least one processor that uses the busy timeslot (there may be multiple that are 
in state Obtaining). Under these circumstances we always have max ^ rf '^ > max ^ rf 'j. h ' . Thus, we can obtain 
a lower bound for the expected time to reach the relative state Allocated by assuming that all nodes are 
allocated independently with probability x = (?^_l) raax { rf -}/ 7 ' \y e simplify the following arguments by using 
this define of x. 

To bound the number of broadcasting rounds we consider the following game. The bank pays 1 unit 
to the nodes that get in state Allocated (get allocated to a timeslot), and receives x/{\ —x) units per nodes 
that fails to get in state Allocated. The game is fair because in each round the expected gain is 1 x x — 
x/{\ — x) x (1 — x) = 0. If we denote by Wj the number of processors that get in state Allocated during 
the i-th broadcasting round and by L,- the number of processors that fail we have that the gain is given by 
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equation 30 where t denotes the total number of rounds. 

g ain = L(T^ L <- w <) 



(30) 



1=1 



The expected gain is because the game is fair (E(gain) = 0) and Y0=i Wi = N because eventually all the 
nodes get in state Allocated and the bank pays 1 unit for each such processors. If we compute the expectation 



on both sides of equation ( 30 ) , we then obtain equation 3 1 



N: 



1 



(31) 



We observe that E(J^ i=l L,) is the expected total number of retransmissions and £"(L- =1 Li) /N is the average 
expected number of retransmissions whose value is (l—x) /x. replacing x with its expression, we obtain that 
the average number of retransmission is bounded by (2n/(n — l)) max W"}/ T — l and, this leads to the bound 



equation (21 ) 



To prove the second assertion, let t\ , . . . , tN be the convergence time of nodes 1 , . . . N, respectively. The 
random variables, tj, are bound by random variables with geometric random distribution with expectation of 
(2n j[n — \ )) d l T , with d = max{dj : dj G P} . We require that £ max = max{? i , . . . , fa} in order to ensure that 
all nodes are allocated with timeslots. The fact that the random variables, are independent and identically 
distributed, implies equation p2~] ), where t is a random geometrical random variable, i.e., Pr(? = k') = 
{l-qf- x qan&Vr{t>k!) = {\-qf'- y . 



Pr(w<*0 =P{h<k',...,t N <k') -- 
Pr (fi <k')-...-P(t N <k')=P(t< k') 

Which t max < k' satisfies equation ( [33] ) with probability a? 



(32) 



Pr(W<*0=Pr(' <k') 



(33) 



!-(!-<?) 



kf-i 



> 1-a 



By solving equation (33 ), we observe that equation (33 ) is satisfied for any k' > k, where k satisfies equa- 
tion (22). This proves that, with probability 1 — a, the network convergence time is bounded by equa- 
tion p2l. □ 



26 



